@distilled.cloud/cloudflare 0.22.3 → 0.22.4

package/lib/services/zero-trust.js

@@ -17228,8 +17228,8 @@ export const listAccessApplicationsForZone = /*@__PURE__*/ /*#__PURE__*/ API.mak
     },
 }));
 const CreateAccessApplicationBaseFields = {
-    domain: Schema.String,
-    type: Schema.Union([
+    domain: Schema.optional(Schema.String),
+    type: Schema.optional(Schema.Union([
         Schema.Literals([
             "self_hosted",
             "saas",
@@ -17247,7 +17247,7 @@ const CreateAccessApplicationBaseFields = {
             "proxy_endpoint",
         ]),
         Schema.String,
-    ]),
+    ])),
     allowAuthenticateViaWarp: Schema.optional(Schema.Boolean),
     allowIframe: Schema.optional(Schema.Boolean),
     allowedIdps: Schema.optional(Schema.Array(Schema.String)),
@@ -17357,39 +17357,435 @@ const CreateAccessApplicationBaseFields = {
     }))),
     optionsPreflightBypass: Schema.optional(Schema.Boolean),
     pathCookieAttribute: Schema.optional(Schema.Boolean),
-    policies: Schema.optional(Schema.Array(Schema.Union([
-        Schema.Struct({
-            id: Schema.optional(Schema.String),
-            precedence: Schema.optional(Schema.Number),
-        }),
-        Schema.String,
-        Schema.Struct({
-            id: Schema.optional(Schema.String),
-            approvalGroups: Schema.optional(Schema.Array(Schema.Struct({
-                approvalsNeeded: Schema.Number,
-                emailAddresses: Schema.optional(Schema.Array(Schema.String)),
-                emailListUuid: Schema.optional(Schema.String),
+    policies: Schema.optional(Schema.Union([
+        Schema.Array(Schema.Union([
+            Schema.Struct({
+                id: Schema.optional(Schema.String),
+                precedence: Schema.optional(Schema.Number),
+            }),
+            Schema.String,
+            Schema.Struct({
+                id: Schema.optional(Schema.String),
+                approvalGroups: Schema.optional(Schema.Array(Schema.Struct({
+                    approvalsNeeded: Schema.Number,
+                    emailAddresses: Schema.optional(Schema.Array(Schema.String)),
+                    emailListUuid: Schema.optional(Schema.String),
+                }).pipe(Schema.encodeKeys({
+                    approvalsNeeded: "approvals_needed",
+                    emailAddresses: "email_addresses",
+                    emailListUuid: "email_list_uuid",
+                })))),
+                approvalRequired: Schema.optional(Schema.Boolean),
+                connectionRules: Schema.optional(Schema.Struct({
+                    rdp: Schema.optional(Schema.Struct({
+                        allowedClipboardLocalToRemoteFormats: Schema.optional(Schema.Array(Schema.Literal("text"))),
+                        allowedClipboardRemoteToLocalFormats: Schema.optional(Schema.Array(Schema.Literal("text"))),
+                    }).pipe(Schema.encodeKeys({
+                        allowedClipboardLocalToRemoteFormats: "allowed_clipboard_local_to_remote_formats",
+                        allowedClipboardRemoteToLocalFormats: "allowed_clipboard_remote_to_local_formats",
+                    }))),
+                })),
+                isolationRequired: Schema.optional(Schema.Boolean),
+                mfaConfig: Schema.optional(Schema.Struct({
+                    allowedAuthenticators: Schema.optional(Schema.Array(Schema.Union([
+                        Schema.Literals(["totp", "biometrics", "security_key"]),
+                        Schema.String,
+                    ]))),
+                    mfaDisabled: Schema.optional(Schema.Boolean),
+                    sessionDuration: Schema.optional(Schema.String),
+                }).pipe(Schema.encodeKeys({
+                    allowedAuthenticators: "allowed_authenticators",
+                    mfaDisabled: "mfa_disabled",
+                    sessionDuration: "session_duration",
+                }))),
+                precedence: Schema.optional(Schema.Number),
+                purposeJustificationPrompt: Schema.optional(Schema.String),
+                purposeJustificationRequired: Schema.optional(Schema.Boolean),
+                sessionDuration: Schema.optional(Schema.String),
             }).pipe(Schema.encodeKeys({
-                approvalsNeeded: "approvals_needed",
-                emailAddresses: "email_addresses",
-                emailListUuid: "email_list_uuid",
-            })))),
-            approvalRequired: Schema.optional(Schema.Boolean),
+                id: "id",
+                approvalGroups: "approval_groups",
+                approvalRequired: "approval_required",
+                connectionRules: "connection_rules",
+                isolationRequired: "isolation_required",
+                mfaConfig: "mfa_config",
+                precedence: "precedence",
+                purposeJustificationPrompt: "purpose_justification_prompt",
+                purposeJustificationRequired: "purpose_justification_required",
+                sessionDuration: "session_duration",
+            })),
+        ])),
+        Schema.Array(Schema.Struct({
+            decision: Schema.Union([
+                Schema.Literals(["allow", "deny", "non_identity", "bypass"]),
+                Schema.String,
+            ]),
+            include: Schema.Array(Schema.Union([
+                Schema.Struct({
+                    group: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    anyValidServiceToken: Schema.Unknown,
+                }).pipe(Schema.encodeKeys({
+                    anyValidServiceToken: "any_valid_service_token",
+                })),
+                Schema.Struct({
+                    authContext: Schema.Struct({
+                        id: Schema.String,
+                        acId: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        acId: "ac_id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }).pipe(Schema.encodeKeys({ authContext: "auth_context" })),
+                Schema.Struct({
+                    authMethod: Schema.Struct({
+                        authMethod: Schema.String,
+                    }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                Schema.Struct({
+                    azureAD: Schema.Struct({
+                        id: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    certificate: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    commonName: Schema.Struct({
+                        commonName: Schema.String,
+                    }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                Schema.Struct({
+                    geo: Schema.Struct({
+                        countryCode: Schema.String,
+                    }).pipe(Schema.encodeKeys({ countryCode: "country_code" })),
+                }),
+                Schema.Struct({
+                    devicePosture: Schema.Struct({
+                        integrationUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ integrationUid: "integration_uid" })),
+                }).pipe(Schema.encodeKeys({ devicePosture: "device_posture" })),
+                Schema.Struct({
+                    emailDomain: Schema.Struct({
+                        domain: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailDomain: "email_domain" })),
+                Schema.Struct({
+                    emailList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailList: "email_list" })),
+                Schema.Struct({
+                    email: Schema.Struct({
+                        email: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    everyone: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    externalEvaluation: Schema.Struct({
+                        evaluateUrl: Schema.String,
+                        keysUrl: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        evaluateUrl: "evaluate_url",
+                        keysUrl: "keys_url",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    externalEvaluation: "external_evaluation",
+                })),
+                Schema.Struct({
+                    githubOrganization: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                        team: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                        team: "team",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    githubOrganization: "github-organization",
+                })),
+                Schema.Struct({
+                    gsuite: Schema.Struct({
+                        email: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        email: "email",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    loginMethod: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ loginMethod: "login_method" })),
+                Schema.Struct({
+                    ipList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ ipList: "ip_list" })),
+                Schema.Struct({
+                    ip: Schema.Struct({
+                        ip: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    okta: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                    })),
+                }),
+                Schema.Struct({
+                    saml: Schema.Struct({
+                        attributeName: Schema.String,
+                        attributeValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        attributeName: "attribute_name",
+                        attributeValue: "attribute_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    oidc: Schema.Struct({
+                        claimName: Schema.String,
+                        claimValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        claimName: "claim_name",
+                        claimValue: "claim_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    serviceToken: Schema.Struct({
+                        tokenId: Schema.String,
+                    }).pipe(Schema.encodeKeys({ tokenId: "token_id" })),
+                }).pipe(Schema.encodeKeys({ serviceToken: "service_token" })),
+                Schema.Struct({
+                    linkedAppToken: Schema.Struct({
+                        appUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ appUid: "app_uid" })),
+                }).pipe(Schema.encodeKeys({ linkedAppToken: "linked_app_token" })),
+                Schema.Struct({
+                    userRiskScore: Schema.Struct({
+                        userRiskScore: Schema.Array(Schema.Union([
+                            Schema.Literals(["low", "medium", "high", "unscored"]),
+                            Schema.String,
+                        ])),
+                    }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                Schema.Struct({
+                    cloudflareAccountMember: Schema.Struct({
+                        accountId: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({ accountId: "account_id" })),
+                }).pipe(Schema.encodeKeys({
+                    cloudflareAccountMember: "cloudflare_account_member",
+                })),
+            ])),
+            name: Schema.String,
             connectionRules: Schema.optional(Schema.Struct({
-                rdp: Schema.optional(Schema.Struct({
-                    allowedClipboardLocalToRemoteFormats: Schema.optional(Schema.Array(Schema.Literal("text"))),
-                    allowedClipboardRemoteToLocalFormats: Schema.optional(Schema.Array(Schema.Literal("text"))),
+                ssh: Schema.optional(Schema.Struct({
+                    usernames: Schema.Array(Schema.String),
+                    allowEmailAlias: Schema.optional(Schema.Boolean),
                 }).pipe(Schema.encodeKeys({
-                    allowedClipboardLocalToRemoteFormats: "allowed_clipboard_local_to_remote_formats",
-                    allowedClipboardRemoteToLocalFormats: "allowed_clipboard_remote_to_local_formats",
+                    usernames: "usernames",
+                    allowEmailAlias: "allow_email_alias",
                 }))),
             })),
-            isolationRequired: Schema.optional(Schema.Boolean),
+            exclude: Schema.optional(Schema.Array(Schema.Union([
+                Schema.Struct({
+                    group: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    anyValidServiceToken: Schema.Unknown,
+                }).pipe(Schema.encodeKeys({
+                    anyValidServiceToken: "any_valid_service_token",
+                })),
+                Schema.Struct({
+                    authContext: Schema.Struct({
+                        id: Schema.String,
+                        acId: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        acId: "ac_id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }).pipe(Schema.encodeKeys({ authContext: "auth_context" })),
+                Schema.Struct({
+                    authMethod: Schema.Struct({
+                        authMethod: Schema.String,
+                    }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                Schema.Struct({
+                    azureAD: Schema.Struct({
+                        id: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    certificate: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    commonName: Schema.Struct({
+                        commonName: Schema.String,
+                    }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                Schema.Struct({
+                    geo: Schema.Struct({
+                        countryCode: Schema.String,
+                    }).pipe(Schema.encodeKeys({ countryCode: "country_code" })),
+                }),
+                Schema.Struct({
+                    devicePosture: Schema.Struct({
+                        integrationUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ integrationUid: "integration_uid" })),
+                }).pipe(Schema.encodeKeys({ devicePosture: "device_posture" })),
+                Schema.Struct({
+                    emailDomain: Schema.Struct({
+                        domain: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailDomain: "email_domain" })),
+                Schema.Struct({
+                    emailList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailList: "email_list" })),
+                Schema.Struct({
+                    email: Schema.Struct({
+                        email: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    everyone: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    externalEvaluation: Schema.Struct({
+                        evaluateUrl: Schema.String,
+                        keysUrl: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        evaluateUrl: "evaluate_url",
+                        keysUrl: "keys_url",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    externalEvaluation: "external_evaluation",
+                })),
+                Schema.Struct({
+                    githubOrganization: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                        team: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                        team: "team",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    githubOrganization: "github-organization",
+                })),
+                Schema.Struct({
+                    gsuite: Schema.Struct({
+                        email: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        email: "email",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    loginMethod: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ loginMethod: "login_method" })),
+                Schema.Struct({
+                    ipList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ ipList: "ip_list" })),
+                Schema.Struct({
+                    ip: Schema.Struct({
+                        ip: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    okta: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                    })),
+                }),
+                Schema.Struct({
+                    saml: Schema.Struct({
+                        attributeName: Schema.String,
+                        attributeValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        attributeName: "attribute_name",
+                        attributeValue: "attribute_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    oidc: Schema.Struct({
+                        claimName: Schema.String,
+                        claimValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        claimName: "claim_name",
+                        claimValue: "claim_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    serviceToken: Schema.Struct({
+                        tokenId: Schema.String,
+                    }).pipe(Schema.encodeKeys({ tokenId: "token_id" })),
+                }).pipe(Schema.encodeKeys({ serviceToken: "service_token" })),
+                Schema.Struct({
+                    linkedAppToken: Schema.Struct({
+                        appUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ appUid: "app_uid" })),
+                }).pipe(Schema.encodeKeys({ linkedAppToken: "linked_app_token" })),
+                Schema.Struct({
+                    userRiskScore: Schema.Struct({
+                        userRiskScore: Schema.Array(Schema.Union([
+                            Schema.Literals(["low", "medium", "high", "unscored"]),
+                            Schema.String,
+                        ])),
+                    }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                Schema.Struct({
+                    cloudflareAccountMember: Schema.Struct({
+                        accountId: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({ accountId: "account_id" })),
+                }).pipe(Schema.encodeKeys({
+                    cloudflareAccountMember: "cloudflare_account_member",
+                })),
+            ]))),
             mfaConfig: Schema.optional(Schema.Struct({
-                allowedAuthenticators: Schema.optional(Schema.Array(Schema.Union([
-                    Schema.Literals(["totp", "biometrics", "security_key"]),
-                    Schema.String,
-                ]))),
+                allowedAuthenticators: Schema.optional(Schema.Array(Schema.Literal("ssh_piv_key"))),
                 mfaDisabled: Schema.optional(Schema.Boolean),
                 sessionDuration: Schema.optional(Schema.String),
             }).pipe(Schema.encodeKeys({
@@ -17397,23 +17793,193 @@ const CreateAccessApplicationBaseFields = {
                 mfaDisabled: "mfa_disabled",
                 sessionDuration: "session_duration",
             }))),
-            precedence: Schema.optional(Schema.Number),
-            purposeJustificationPrompt: Schema.optional(Schema.String),
-            purposeJustificationRequired: Schema.optional(Schema.Boolean),
-            sessionDuration: Schema.optional(Schema.String),
+            require: Schema.optional(Schema.Array(Schema.Union([
+                Schema.Struct({
+                    group: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    anyValidServiceToken: Schema.Unknown,
+                }).pipe(Schema.encodeKeys({
+                    anyValidServiceToken: "any_valid_service_token",
+                })),
+                Schema.Struct({
+                    authContext: Schema.Struct({
+                        id: Schema.String,
+                        acId: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        acId: "ac_id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }).pipe(Schema.encodeKeys({ authContext: "auth_context" })),
+                Schema.Struct({
+                    authMethod: Schema.Struct({
+                        authMethod: Schema.String,
+                    }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                Schema.Struct({
+                    azureAD: Schema.Struct({
+                        id: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    certificate: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    commonName: Schema.Struct({
+                        commonName: Schema.String,
+                    }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                Schema.Struct({
+                    geo: Schema.Struct({
+                        countryCode: Schema.String,
+                    }).pipe(Schema.encodeKeys({ countryCode: "country_code" })),
+                }),
+                Schema.Struct({
+                    devicePosture: Schema.Struct({
+                        integrationUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ integrationUid: "integration_uid" })),
+                }).pipe(Schema.encodeKeys({ devicePosture: "device_posture" })),
+                Schema.Struct({
+                    emailDomain: Schema.Struct({
+                        domain: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailDomain: "email_domain" })),
+                Schema.Struct({
+                    emailList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailList: "email_list" })),
+                Schema.Struct({
+                    email: Schema.Struct({
+                        email: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    everyone: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    externalEvaluation: Schema.Struct({
+                        evaluateUrl: Schema.String,
+                        keysUrl: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        evaluateUrl: "evaluate_url",
+                        keysUrl: "keys_url",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    externalEvaluation: "external_evaluation",
+                })),
+                Schema.Struct({
+                    githubOrganization: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                        team: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                        team: "team",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    githubOrganization: "github-organization",
+                })),
+                Schema.Struct({
+                    gsuite: Schema.Struct({
+                        email: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        email: "email",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    loginMethod: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ loginMethod: "login_method" })),
+                Schema.Struct({
+                    ipList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ ipList: "ip_list" })),
+                Schema.Struct({
+                    ip: Schema.Struct({
+                        ip: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    okta: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                    })),
+                }),
+                Schema.Struct({
+                    saml: Schema.Struct({
+                        attributeName: Schema.String,
+                        attributeValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        attributeName: "attribute_name",
+                        attributeValue: "attribute_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    oidc: Schema.Struct({
+                        claimName: Schema.String,
+                        claimValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        claimName: "claim_name",
+                        claimValue: "claim_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    serviceToken: Schema.Struct({
+                        tokenId: Schema.String,
+                    }).pipe(Schema.encodeKeys({ tokenId: "token_id" })),
+                }).pipe(Schema.encodeKeys({ serviceToken: "service_token" })),
+                Schema.Struct({
+                    linkedAppToken: Schema.Struct({
+                        appUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ appUid: "app_uid" })),
+                }).pipe(Schema.encodeKeys({ linkedAppToken: "linked_app_token" })),
+                Schema.Struct({
+                    userRiskScore: Schema.Struct({
+                        userRiskScore: Schema.Array(Schema.Union([
+                            Schema.Literals(["low", "medium", "high", "unscored"]),
+                            Schema.String,
+                        ])),
+                    }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                Schema.Struct({
+                    cloudflareAccountMember: Schema.Struct({
+                        accountId: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({ accountId: "account_id" })),
+                }).pipe(Schema.encodeKeys({
+                    cloudflareAccountMember: "cloudflare_account_member",
+                })),
+            ]))),
         }).pipe(Schema.encodeKeys({
-            id: "id",
-            approvalGroups: "approval_groups",
-            approvalRequired: "approval_required",
+            decision: "decision",
+            include: "include",
+            name: "name",
             connectionRules: "connection_rules",
-            isolationRequired: "isolation_required",
+            exclude: "exclude",
             mfaConfig: "mfa_config",
-            precedence: "precedence",
-            purposeJustificationPrompt: "purpose_justification_prompt",
-            purposeJustificationRequired: "purpose_justification_required",
-            sessionDuration: "session_duration",
-        })),
-    ]))),
+            require: "require",
+        }))),
+    ])),
     readServiceTokensFromHeader: Schema.optional(Schema.String),
     sameSiteCookieAttribute: Schema.optional(Schema.String),
     scimConfig: Schema.optional(Schema.Struct({
@@ -17527,6 +18093,155 @@ const CreateAccessApplicationBaseFields = {
     skipInterstitial: Schema.optional(Schema.Boolean),
     tags: Schema.optional(Schema.Array(Schema.String)),
     useClientlessIsolationAppLauncherUrl: Schema.optional(Schema.Boolean),
+    saasApp: Schema.optional(Schema.Struct({
+        authType: Schema.optional(Schema.Union([Schema.Literals(["saml", "oidc"]), Schema.String])),
+        consumerServiceUrl: Schema.optional(Schema.String),
+        customAttributes: Schema.optional(Schema.Array(Schema.Struct({
+            friendlyName: Schema.optional(Schema.String),
+            name: Schema.optional(Schema.String),
+            nameFormat: Schema.optional(Schema.Union([
+                Schema.Literals([
+                    "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified",
+                    "urn:oasis:names:tc:SAML:2.0:attrname-format:basic",
+                    "urn:oasis:names:tc:SAML:2.0:attrname-format:uri",
+                ]),
+                Schema.String,
+            ])),
+            required: Schema.optional(Schema.Boolean),
+            source: Schema.optional(Schema.Struct({
+                name: Schema.optional(Schema.String),
+                nameByIdp: Schema.optional(Schema.Array(Schema.Struct({
+                    idpId: Schema.optional(Schema.String),
+                    sourceName: Schema.optional(Schema.String),
+                }).pipe(Schema.encodeKeys({
+                    idpId: "idp_id",
+                    sourceName: "source_name",
+                })))),
+            }).pipe(Schema.encodeKeys({ name: "name", nameByIdp: "name_by_idp" }))),
+        }).pipe(Schema.encodeKeys({
+            friendlyName: "friendly_name",
+            name: "name",
+            nameFormat: "name_format",
+            required: "required",
+            source: "source",
+        })))),
+        defaultRelayState: Schema.optional(Schema.String),
+        idpEntityId: Schema.optional(Schema.String),
+        nameIdFormat: Schema.optional(Schema.Union([Schema.Literals(["id", "email"]), Schema.String])),
+        nameIdTransformJsonata: Schema.optional(Schema.String),
+        publicKey: Schema.optional(Schema.String),
+        samlAttributeTransformJsonata: Schema.optional(Schema.String),
+        spEntityId: Schema.optional(Schema.String),
+        ssoEndpoint: Schema.optional(Schema.String),
+        accessTokenLifetime: Schema.optional(Schema.String),
+        allowPkceWithoutClientSecret: Schema.optional(Schema.Boolean),
+        appLauncherUrl: Schema.optional(Schema.String),
+        clientId: Schema.optional(Schema.String),
+        clientSecret: Schema.optional(SensitiveString),
+        customClaims: Schema.optional(Schema.Array(Schema.Struct({
+            name: Schema.optional(Schema.String),
+            required: Schema.optional(Schema.Boolean),
+            scope: Schema.optional(Schema.Union([
+                Schema.Literals(["groups", "profile", "email", "openid"]),
+                Schema.String,
+            ])),
+            source: Schema.optional(Schema.Struct({
+                name: Schema.optional(Schema.String),
+                nameByIdp: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+            }).pipe(Schema.encodeKeys({ name: "name", nameByIdp: "name_by_idp" }))),
+        }))),
+        grantTypes: Schema.optional(Schema.Array(Schema.Union([
+            Schema.Literals([
+                "authorization_code",
+                "authorization_code_with_pkce",
+                "refresh_tokens",
+                "hybrid",
+                "implicit",
+            ]),
+            Schema.String,
+        ]))),
+        groupFilterRegex: Schema.optional(Schema.String),
+        hybridAndImplicitOptions: Schema.optional(Schema.Struct({
+            returnAccessTokenFromAuthorizationEndpoint: Schema.optional(Schema.Boolean),
+            returnIdTokenFromAuthorizationEndpoint: Schema.optional(Schema.Boolean),
+        }).pipe(Schema.encodeKeys({
+            returnAccessTokenFromAuthorizationEndpoint: "return_access_token_from_authorization_endpoint",
+            returnIdTokenFromAuthorizationEndpoint: "return_id_token_from_authorization_endpoint",
+        }))),
+        redirectUris: Schema.optional(Schema.Array(Schema.String)),
+        refreshTokenOptions: Schema.optional(Schema.Struct({
+            lifetime: Schema.optional(Schema.String),
+        })),
+        scopes: Schema.optional(Schema.Array(Schema.Union([
+            Schema.Literals(["openid", "groups", "email", "profile"]),
+            Schema.String,
+        ]))),
+    }).pipe(Schema.encodeKeys({
+        authType: "auth_type",
+        consumerServiceUrl: "consumer_service_url",
+        customAttributes: "custom_attributes",
+        defaultRelayState: "default_relay_state",
+        idpEntityId: "idp_entity_id",
+        nameIdFormat: "name_id_format",
+        nameIdTransformJsonata: "name_id_transform_jsonata",
+        publicKey: "public_key",
+        samlAttributeTransformJsonata: "saml_attribute_transform_jsonata",
+        spEntityId: "sp_entity_id",
+        ssoEndpoint: "sso_endpoint",
+        accessTokenLifetime: "access_token_lifetime",
+        allowPkceWithoutClientSecret: "allow_pkce_without_client_secret",
+        appLauncherUrl: "app_launcher_url",
+        clientId: "client_id",
+        clientSecret: "client_secret",
+        customClaims: "custom_claims",
+        grantTypes: "grant_types",
+        groupFilterRegex: "group_filter_regex",
+        hybridAndImplicitOptions: "hybrid_and_implicit_options",
+        redirectUris: "redirect_uris",
+        refreshTokenOptions: "refresh_token_options",
+        scopes: "scopes",
+    }))),
+    appLauncherLogoUrl: Schema.optional(Schema.String),
+    bgColor: Schema.optional(Schema.String),
+    footerLinks: Schema.optional(Schema.Array(Schema.Struct({
+        name: Schema.String,
+        url: Schema.String,
+    }))),
+    headerBgColor: Schema.optional(Schema.String),
+    landingPageDesign: Schema.optional(Schema.Struct({
+        buttonColor: Schema.optional(Schema.String),
+        buttonTextColor: Schema.optional(Schema.String),
+        imageUrl: Schema.optional(Schema.String),
+        message: Schema.optional(Schema.String),
+        title: Schema.optional(Schema.String),
+    }).pipe(Schema.encodeKeys({
+        buttonColor: "button_color",
+        buttonTextColor: "button_text_color",
+        imageUrl: "image_url",
+        message: "message",
+        title: "title",
+    }))),
+    skipAppLauncherLoginPage: Schema.optional(Schema.Boolean),
+    targetCriteria: Schema.optional(Schema.Union([
+        Schema.Array(Schema.Struct({
+            port: Schema.Number,
+            protocol: Schema.Literal("SSH"),
+            targetAttributes: Schema.Record(Schema.String, Schema.Unknown),
+        }).pipe(Schema.encodeKeys({
+            port: "port",
+            protocol: "protocol",
+            targetAttributes: "target_attributes",
+        }))),
+        Schema.Array(Schema.Struct({
+            port: Schema.Number,
+            protocol: Schema.Literal("RDP"),
+            targetAttributes: Schema.Record(Schema.String, Schema.Unknown),
+        }).pipe(Schema.encodeKeys({
+            port: "port",
+            protocol: "protocol",
+            targetAttributes: "target_attributes",
+        }))),
+    ])),
 };
 export const CreateAccessApplicationForAccountRequest = 
 /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
@@ -17564,6 +18279,14 @@ export const CreateAccessApplicationForAccountRequest =
     skipInterstitial: "skip_interstitial",
     tags: "tags",
     useClientlessIsolationAppLauncherUrl: "use_clientless_isolation_app_launcher_url",
+    saasApp: "saas_app",
+    appLauncherLogoUrl: "app_launcher_logo_url",
+    bgColor: "bg_color",
+    footerLinks: "footer_links",
+    headerBgColor: "header_bg_color",
+    landingPageDesign: "landing_page_design",
+    skipAppLauncherLoginPage: "skip_app_launcher_login_page",
+    targetCriteria: "target_criteria",
 }), T.Http({ method: "POST", path: "/accounts/{account_id}/access/apps" }));
 export const CreateAccessApplicationForZoneRequest = 
 /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
@@ -17601,6 +18324,14 @@ export const CreateAccessApplicationForZoneRequest =
     skipInterstitial: "skip_interstitial",
     tags: "tags",
     useClientlessIsolationAppLauncherUrl: "use_clientless_isolation_app_launcher_url",
+    saasApp: "saas_app",
+    appLauncherLogoUrl: "app_launcher_logo_url",
+    bgColor: "bg_color",
+    footerLinks: "footer_links",
+    headerBgColor: "header_bg_color",
+    landingPageDesign: "landing_page_design",
+    skipAppLauncherLoginPage: "skip_app_launcher_login_page",
+    targetCriteria: "target_criteria",
 }), T.Http({ method: "POST", path: "/zones/{zone_id}/access/apps" }));
 export const CreateAccessApplicationResponse = 
 /*@__PURE__*/ /*#__PURE__*/ Schema.Union([
@@ -25415,8 +26146,8 @@ export const createAccessApplicationForZone = /*@__PURE__*/ /*#__PURE__*/ API.ma
 }));
 const UpdateAccessApplicationBaseFields = {
     appId: Schema.String.pipe(T.HttpPath("appId")),
-    domain: Schema.String,
-    type: Schema.Union([
+    domain: Schema.optional(Schema.String),
+    type: Schema.optional(Schema.Union([
         Schema.Literals([
             "self_hosted",
             "saas",
@@ -25434,7 +26165,7 @@ const UpdateAccessApplicationBaseFields = {
             "proxy_endpoint",
         ]),
         Schema.String,
-    ]),
+    ])),
     allowAuthenticateViaWarp: Schema.optional(Schema.Boolean),
     allowIframe: Schema.optional(Schema.Boolean),
     allowedIdps: Schema.optional(Schema.Array(Schema.String)),
@@ -25544,39 +26275,435 @@ const UpdateAccessApplicationBaseFields = {
     }))),
     optionsPreflightBypass: Schema.optional(Schema.Boolean),
     pathCookieAttribute: Schema.optional(Schema.Boolean),
-    policies: Schema.optional(Schema.Array(Schema.Union([
-        Schema.Struct({
-            id: Schema.optional(Schema.String),
-            precedence: Schema.optional(Schema.Number),
-        }),
-        Schema.String,
-        Schema.Struct({
-            id: Schema.optional(Schema.String),
-            approvalGroups: Schema.optional(Schema.Array(Schema.Struct({
-                approvalsNeeded: Schema.Number,
-                emailAddresses: Schema.optional(Schema.Array(Schema.String)),
-                emailListUuid: Schema.optional(Schema.String),
+    policies: Schema.optional(Schema.Union([
+        Schema.Array(Schema.Union([
+            Schema.Struct({
+                id: Schema.optional(Schema.String),
+                precedence: Schema.optional(Schema.Number),
+            }),
+            Schema.String,
+            Schema.Struct({
+                id: Schema.optional(Schema.String),
+                approvalGroups: Schema.optional(Schema.Array(Schema.Struct({
+                    approvalsNeeded: Schema.Number,
+                    emailAddresses: Schema.optional(Schema.Array(Schema.String)),
+                    emailListUuid: Schema.optional(Schema.String),
+                }).pipe(Schema.encodeKeys({
+                    approvalsNeeded: "approvals_needed",
+                    emailAddresses: "email_addresses",
+                    emailListUuid: "email_list_uuid",
+                })))),
+                approvalRequired: Schema.optional(Schema.Boolean),
+                connectionRules: Schema.optional(Schema.Struct({
+                    rdp: Schema.optional(Schema.Struct({
+                        allowedClipboardLocalToRemoteFormats: Schema.optional(Schema.Array(Schema.Literal("text"))),
+                        allowedClipboardRemoteToLocalFormats: Schema.optional(Schema.Array(Schema.Literal("text"))),
+                    }).pipe(Schema.encodeKeys({
+                        allowedClipboardLocalToRemoteFormats: "allowed_clipboard_local_to_remote_formats",
+                        allowedClipboardRemoteToLocalFormats: "allowed_clipboard_remote_to_local_formats",
+                    }))),
+                })),
+                isolationRequired: Schema.optional(Schema.Boolean),
+                mfaConfig: Schema.optional(Schema.Struct({
+                    allowedAuthenticators: Schema.optional(Schema.Array(Schema.Union([
+                        Schema.Literals(["totp", "biometrics", "security_key"]),
+                        Schema.String,
+                    ]))),
+                    mfaDisabled: Schema.optional(Schema.Boolean),
+                    sessionDuration: Schema.optional(Schema.String),
+                }).pipe(Schema.encodeKeys({
+                    allowedAuthenticators: "allowed_authenticators",
+                    mfaDisabled: "mfa_disabled",
+                    sessionDuration: "session_duration",
+                }))),
+                precedence: Schema.optional(Schema.Number),
+                purposeJustificationPrompt: Schema.optional(Schema.String),
+                purposeJustificationRequired: Schema.optional(Schema.Boolean),
+                sessionDuration: Schema.optional(Schema.String),
             }).pipe(Schema.encodeKeys({
-                approvalsNeeded: "approvals_needed",
-                emailAddresses: "email_addresses",
-                emailListUuid: "email_list_uuid",
-            })))),
-            approvalRequired: Schema.optional(Schema.Boolean),
+                id: "id",
+                approvalGroups: "approval_groups",
+                approvalRequired: "approval_required",
+                connectionRules: "connection_rules",
+                isolationRequired: "isolation_required",
+                mfaConfig: "mfa_config",
+                precedence: "precedence",
+                purposeJustificationPrompt: "purpose_justification_prompt",
+                purposeJustificationRequired: "purpose_justification_required",
+                sessionDuration: "session_duration",
+            })),
+        ])),
+        Schema.Array(Schema.Struct({
+            decision: Schema.Union([
+                Schema.Literals(["allow", "deny", "non_identity", "bypass"]),
+                Schema.String,
+            ]),
+            include: Schema.Array(Schema.Union([
+                Schema.Struct({
+                    group: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    anyValidServiceToken: Schema.Unknown,
+                }).pipe(Schema.encodeKeys({
+                    anyValidServiceToken: "any_valid_service_token",
+                })),
+                Schema.Struct({
+                    authContext: Schema.Struct({
+                        id: Schema.String,
+                        acId: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        acId: "ac_id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }).pipe(Schema.encodeKeys({ authContext: "auth_context" })),
+                Schema.Struct({
+                    authMethod: Schema.Struct({
+                        authMethod: Schema.String,
+                    }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                Schema.Struct({
+                    azureAD: Schema.Struct({
+                        id: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    certificate: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    commonName: Schema.Struct({
+                        commonName: Schema.String,
+                    }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                Schema.Struct({
+                    geo: Schema.Struct({
+                        countryCode: Schema.String,
+                    }).pipe(Schema.encodeKeys({ countryCode: "country_code" })),
+                }),
+                Schema.Struct({
+                    devicePosture: Schema.Struct({
+                        integrationUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ integrationUid: "integration_uid" })),
+                }).pipe(Schema.encodeKeys({ devicePosture: "device_posture" })),
+                Schema.Struct({
+                    emailDomain: Schema.Struct({
+                        domain: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailDomain: "email_domain" })),
+                Schema.Struct({
+                    emailList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailList: "email_list" })),
+                Schema.Struct({
+                    email: Schema.Struct({
+                        email: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    everyone: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    externalEvaluation: Schema.Struct({
+                        evaluateUrl: Schema.String,
+                        keysUrl: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        evaluateUrl: "evaluate_url",
+                        keysUrl: "keys_url",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    externalEvaluation: "external_evaluation",
+                })),
+                Schema.Struct({
+                    githubOrganization: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                        team: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                        team: "team",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    githubOrganization: "github-organization",
+                })),
+                Schema.Struct({
+                    gsuite: Schema.Struct({
+                        email: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        email: "email",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    loginMethod: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ loginMethod: "login_method" })),
+                Schema.Struct({
+                    ipList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ ipList: "ip_list" })),
+                Schema.Struct({
+                    ip: Schema.Struct({
+                        ip: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    okta: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                    })),
+                }),
+                Schema.Struct({
+                    saml: Schema.Struct({
+                        attributeName: Schema.String,
+                        attributeValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        attributeName: "attribute_name",
+                        attributeValue: "attribute_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    oidc: Schema.Struct({
+                        claimName: Schema.String,
+                        claimValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        claimName: "claim_name",
+                        claimValue: "claim_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    serviceToken: Schema.Struct({
+                        tokenId: Schema.String,
+                    }).pipe(Schema.encodeKeys({ tokenId: "token_id" })),
+                }).pipe(Schema.encodeKeys({ serviceToken: "service_token" })),
+                Schema.Struct({
+                    linkedAppToken: Schema.Struct({
+                        appUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ appUid: "app_uid" })),
+                }).pipe(Schema.encodeKeys({ linkedAppToken: "linked_app_token" })),
+                Schema.Struct({
+                    userRiskScore: Schema.Struct({
+                        userRiskScore: Schema.Array(Schema.Union([
+                            Schema.Literals(["low", "medium", "high", "unscored"]),
+                            Schema.String,
+                        ])),
+                    }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                Schema.Struct({
+                    cloudflareAccountMember: Schema.Struct({
+                        accountId: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({ accountId: "account_id" })),
+                }).pipe(Schema.encodeKeys({
+                    cloudflareAccountMember: "cloudflare_account_member",
+                })),
+            ])),
+            name: Schema.String,
             connectionRules: Schema.optional(Schema.Struct({
-                rdp: Schema.optional(Schema.Struct({
-                    allowedClipboardLocalToRemoteFormats: Schema.optional(Schema.Array(Schema.Literal("text"))),
-                    allowedClipboardRemoteToLocalFormats: Schema.optional(Schema.Array(Schema.Literal("text"))),
+                ssh: Schema.optional(Schema.Struct({
+                    usernames: Schema.Array(Schema.String),
+                    allowEmailAlias: Schema.optional(Schema.Boolean),
                 }).pipe(Schema.encodeKeys({
-                    allowedClipboardLocalToRemoteFormats: "allowed_clipboard_local_to_remote_formats",
-                    allowedClipboardRemoteToLocalFormats: "allowed_clipboard_remote_to_local_formats",
+                    usernames: "usernames",
+                    allowEmailAlias: "allow_email_alias",
                 }))),
             })),
-            isolationRequired: Schema.optional(Schema.Boolean),
+            exclude: Schema.optional(Schema.Array(Schema.Union([
+                Schema.Struct({
+                    group: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    anyValidServiceToken: Schema.Unknown,
+                }).pipe(Schema.encodeKeys({
+                    anyValidServiceToken: "any_valid_service_token",
+                })),
+                Schema.Struct({
+                    authContext: Schema.Struct({
+                        id: Schema.String,
+                        acId: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        acId: "ac_id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }).pipe(Schema.encodeKeys({ authContext: "auth_context" })),
+                Schema.Struct({
+                    authMethod: Schema.Struct({
+                        authMethod: Schema.String,
+                    }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                Schema.Struct({
+                    azureAD: Schema.Struct({
+                        id: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    certificate: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    commonName: Schema.Struct({
+                        commonName: Schema.String,
+                    }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                Schema.Struct({
+                    geo: Schema.Struct({
+                        countryCode: Schema.String,
+                    }).pipe(Schema.encodeKeys({ countryCode: "country_code" })),
+                }),
+                Schema.Struct({
+                    devicePosture: Schema.Struct({
+                        integrationUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ integrationUid: "integration_uid" })),
+                }).pipe(Schema.encodeKeys({ devicePosture: "device_posture" })),
+                Schema.Struct({
+                    emailDomain: Schema.Struct({
+                        domain: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailDomain: "email_domain" })),
+                Schema.Struct({
+                    emailList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailList: "email_list" })),
+                Schema.Struct({
+                    email: Schema.Struct({
+                        email: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    everyone: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    externalEvaluation: Schema.Struct({
+                        evaluateUrl: Schema.String,
+                        keysUrl: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        evaluateUrl: "evaluate_url",
+                        keysUrl: "keys_url",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    externalEvaluation: "external_evaluation",
+                })),
+                Schema.Struct({
+                    githubOrganization: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                        team: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                        team: "team",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    githubOrganization: "github-organization",
+                })),
+                Schema.Struct({
+                    gsuite: Schema.Struct({
+                        email: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        email: "email",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    loginMethod: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ loginMethod: "login_method" })),
+                Schema.Struct({
+                    ipList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ ipList: "ip_list" })),
+                Schema.Struct({
+                    ip: Schema.Struct({
+                        ip: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    okta: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                    })),
+                }),
+                Schema.Struct({
+                    saml: Schema.Struct({
+                        attributeName: Schema.String,
+                        attributeValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        attributeName: "attribute_name",
+                        attributeValue: "attribute_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    oidc: Schema.Struct({
+                        claimName: Schema.String,
+                        claimValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        claimName: "claim_name",
+                        claimValue: "claim_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    serviceToken: Schema.Struct({
+                        tokenId: Schema.String,
+                    }).pipe(Schema.encodeKeys({ tokenId: "token_id" })),
+                }).pipe(Schema.encodeKeys({ serviceToken: "service_token" })),
+                Schema.Struct({
+                    linkedAppToken: Schema.Struct({
+                        appUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ appUid: "app_uid" })),
+                }).pipe(Schema.encodeKeys({ linkedAppToken: "linked_app_token" })),
+                Schema.Struct({
+                    userRiskScore: Schema.Struct({
+                        userRiskScore: Schema.Array(Schema.Union([
+                            Schema.Literals(["low", "medium", "high", "unscored"]),
+                            Schema.String,
+                        ])),
+                    }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                Schema.Struct({
+                    cloudflareAccountMember: Schema.Struct({
+                        accountId: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({ accountId: "account_id" })),
+                }).pipe(Schema.encodeKeys({
+                    cloudflareAccountMember: "cloudflare_account_member",
+                })),
+            ]))),
             mfaConfig: Schema.optional(Schema.Struct({
-                allowedAuthenticators: Schema.optional(Schema.Array(Schema.Union([
-                    Schema.Literals(["totp", "biometrics", "security_key"]),
-                    Schema.String,
-                ]))),
+                allowedAuthenticators: Schema.optional(Schema.Array(Schema.Literal("ssh_piv_key"))),
                 mfaDisabled: Schema.optional(Schema.Boolean),
                 sessionDuration: Schema.optional(Schema.String),
             }).pipe(Schema.encodeKeys({
@@ -25584,23 +26711,193 @@ const UpdateAccessApplicationBaseFields = {
                 mfaDisabled: "mfa_disabled",
                 sessionDuration: "session_duration",
             }))),
-            precedence: Schema.optional(Schema.Number),
-            purposeJustificationPrompt: Schema.optional(Schema.String),
-            purposeJustificationRequired: Schema.optional(Schema.Boolean),
-            sessionDuration: Schema.optional(Schema.String),
+            require: Schema.optional(Schema.Array(Schema.Union([
+                Schema.Struct({
+                    group: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    anyValidServiceToken: Schema.Unknown,
+                }).pipe(Schema.encodeKeys({
+                    anyValidServiceToken: "any_valid_service_token",
+                })),
+                Schema.Struct({
+                    authContext: Schema.Struct({
+                        id: Schema.String,
+                        acId: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        acId: "ac_id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }).pipe(Schema.encodeKeys({ authContext: "auth_context" })),
+                Schema.Struct({
+                    authMethod: Schema.Struct({
+                        authMethod: Schema.String,
+                    }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                }).pipe(Schema.encodeKeys({ authMethod: "auth_method" })),
+                Schema.Struct({
+                    azureAD: Schema.Struct({
+                        id: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        id: "id",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    certificate: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    commonName: Schema.Struct({
+                        commonName: Schema.String,
+                    }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                }).pipe(Schema.encodeKeys({ commonName: "common_name" })),
+                Schema.Struct({
+                    geo: Schema.Struct({
+                        countryCode: Schema.String,
+                    }).pipe(Schema.encodeKeys({ countryCode: "country_code" })),
+                }),
+                Schema.Struct({
+                    devicePosture: Schema.Struct({
+                        integrationUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ integrationUid: "integration_uid" })),
+                }).pipe(Schema.encodeKeys({ devicePosture: "device_posture" })),
+                Schema.Struct({
+                    emailDomain: Schema.Struct({
+                        domain: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailDomain: "email_domain" })),
+                Schema.Struct({
+                    emailList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ emailList: "email_list" })),
+                Schema.Struct({
+                    email: Schema.Struct({
+                        email: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    everyone: Schema.Unknown,
+                }),
+                Schema.Struct({
+                    externalEvaluation: Schema.Struct({
+                        evaluateUrl: Schema.String,
+                        keysUrl: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        evaluateUrl: "evaluate_url",
+                        keysUrl: "keys_url",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    externalEvaluation: "external_evaluation",
+                })),
+                Schema.Struct({
+                    githubOrganization: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                        team: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                        team: "team",
+                    })),
+                }).pipe(Schema.encodeKeys({
+                    githubOrganization: "github-organization",
+                })),
+                Schema.Struct({
+                    gsuite: Schema.Struct({
+                        email: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        email: "email",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    loginMethod: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ loginMethod: "login_method" })),
+                Schema.Struct({
+                    ipList: Schema.Struct({
+                        id: Schema.String,
+                    }),
+                }).pipe(Schema.encodeKeys({ ipList: "ip_list" })),
+                Schema.Struct({
+                    ip: Schema.Struct({
+                        ip: Schema.String,
+                    }),
+                }),
+                Schema.Struct({
+                    okta: Schema.Struct({
+                        identityProviderId: Schema.String,
+                        name: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        identityProviderId: "identity_provider_id",
+                        name: "name",
+                    })),
+                }),
+                Schema.Struct({
+                    saml: Schema.Struct({
+                        attributeName: Schema.String,
+                        attributeValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        attributeName: "attribute_name",
+                        attributeValue: "attribute_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    oidc: Schema.Struct({
+                        claimName: Schema.String,
+                        claimValue: Schema.String,
+                        identityProviderId: Schema.String,
+                    }).pipe(Schema.encodeKeys({
+                        claimName: "claim_name",
+                        claimValue: "claim_value",
+                        identityProviderId: "identity_provider_id",
+                    })),
+                }),
+                Schema.Struct({
+                    serviceToken: Schema.Struct({
+                        tokenId: Schema.String,
+                    }).pipe(Schema.encodeKeys({ tokenId: "token_id" })),
+                }).pipe(Schema.encodeKeys({ serviceToken: "service_token" })),
+                Schema.Struct({
+                    linkedAppToken: Schema.Struct({
+                        appUid: Schema.String,
+                    }).pipe(Schema.encodeKeys({ appUid: "app_uid" })),
+                }).pipe(Schema.encodeKeys({ linkedAppToken: "linked_app_token" })),
+                Schema.Struct({
+                    userRiskScore: Schema.Struct({
+                        userRiskScore: Schema.Array(Schema.Union([
+                            Schema.Literals(["low", "medium", "high", "unscored"]),
+                            Schema.String,
+                        ])),
+                    }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                }).pipe(Schema.encodeKeys({ userRiskScore: "user_risk_score" })),
+                Schema.Struct({
+                    cloudflareAccountMember: Schema.Struct({
+                        accountId: Schema.optional(Schema.String),
+                    }).pipe(Schema.encodeKeys({ accountId: "account_id" })),
+                }).pipe(Schema.encodeKeys({
+                    cloudflareAccountMember: "cloudflare_account_member",
+                })),
+            ]))),
         }).pipe(Schema.encodeKeys({
-            id: "id",
-            approvalGroups: "approval_groups",
-            approvalRequired: "approval_required",
+            decision: "decision",
+            include: "include",
+            name: "name",
             connectionRules: "connection_rules",
-            isolationRequired: "isolation_required",
+            exclude: "exclude",
             mfaConfig: "mfa_config",
-            precedence: "precedence",
-            purposeJustificationPrompt: "purpose_justification_prompt",
-            purposeJustificationRequired: "purpose_justification_required",
-            sessionDuration: "session_duration",
-        })),
-    ]))),
+            require: "require",
+        }))),
+    ])),
     readServiceTokensFromHeader: Schema.optional(Schema.String),
     sameSiteCookieAttribute: Schema.optional(Schema.String),
     scimConfig: Schema.optional(Schema.Struct({
@@ -25714,6 +27011,155 @@ const UpdateAccessApplicationBaseFields = {
     skipInterstitial: Schema.optional(Schema.Boolean),
     tags: Schema.optional(Schema.Array(Schema.String)),
     useClientlessIsolationAppLauncherUrl: Schema.optional(Schema.Boolean),
+    saasApp: Schema.optional(Schema.Struct({
+        authType: Schema.optional(Schema.Union([Schema.Literals(["saml", "oidc"]), Schema.String])),
+        consumerServiceUrl: Schema.optional(Schema.String),
+        customAttributes: Schema.optional(Schema.Array(Schema.Struct({
+            friendlyName: Schema.optional(Schema.String),
+            name: Schema.optional(Schema.String),
+            nameFormat: Schema.optional(Schema.Union([
+                Schema.Literals([
+                    "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified",
+                    "urn:oasis:names:tc:SAML:2.0:attrname-format:basic",
+                    "urn:oasis:names:tc:SAML:2.0:attrname-format:uri",
+                ]),
+                Schema.String,
+            ])),
+            required: Schema.optional(Schema.Boolean),
+            source: Schema.optional(Schema.Struct({
+                name: Schema.optional(Schema.String),
+                nameByIdp: Schema.optional(Schema.Array(Schema.Struct({
+                    idpId: Schema.optional(Schema.String),
+                    sourceName: Schema.optional(Schema.String),
+                }).pipe(Schema.encodeKeys({
+                    idpId: "idp_id",
+                    sourceName: "source_name",
+                })))),
+            }).pipe(Schema.encodeKeys({ name: "name", nameByIdp: "name_by_idp" }))),
+        }).pipe(Schema.encodeKeys({
+            friendlyName: "friendly_name",
+            name: "name",
+            nameFormat: "name_format",
+            required: "required",
+            source: "source",
+        })))),
+        defaultRelayState: Schema.optional(Schema.String),
+        idpEntityId: Schema.optional(Schema.String),
+        nameIdFormat: Schema.optional(Schema.Union([Schema.Literals(["id", "email"]), Schema.String])),
+        nameIdTransformJsonata: Schema.optional(Schema.String),
+        publicKey: Schema.optional(Schema.String),
+        samlAttributeTransformJsonata: Schema.optional(Schema.String),
+        spEntityId: Schema.optional(Schema.String),
+        ssoEndpoint: Schema.optional(Schema.String),
+        accessTokenLifetime: Schema.optional(Schema.String),
+        allowPkceWithoutClientSecret: Schema.optional(Schema.Boolean),
+        appLauncherUrl: Schema.optional(Schema.String),
+        clientId: Schema.optional(Schema.String),
+        clientSecret: Schema.optional(SensitiveString),
+        customClaims: Schema.optional(Schema.Array(Schema.Struct({
+            name: Schema.optional(Schema.String),
+            required: Schema.optional(Schema.Boolean),
+            scope: Schema.optional(Schema.Union([
+                Schema.Literals(["groups", "profile", "email", "openid"]),
+                Schema.String,
+            ])),
+            source: Schema.optional(Schema.Struct({
+                name: Schema.optional(Schema.String),
+                nameByIdp: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+            }).pipe(Schema.encodeKeys({ name: "name", nameByIdp: "name_by_idp" }))),
+        }))),
+        grantTypes: Schema.optional(Schema.Array(Schema.Union([
+            Schema.Literals([
+                "authorization_code",
+                "authorization_code_with_pkce",
+                "refresh_tokens",
+                "hybrid",
+                "implicit",
+            ]),
+            Schema.String,
+        ]))),
+        groupFilterRegex: Schema.optional(Schema.String),
+        hybridAndImplicitOptions: Schema.optional(Schema.Struct({
+            returnAccessTokenFromAuthorizationEndpoint: Schema.optional(Schema.Boolean),
+            returnIdTokenFromAuthorizationEndpoint: Schema.optional(Schema.Boolean),
+        }).pipe(Schema.encodeKeys({
+            returnAccessTokenFromAuthorizationEndpoint: "return_access_token_from_authorization_endpoint",
+            returnIdTokenFromAuthorizationEndpoint: "return_id_token_from_authorization_endpoint",
+        }))),
+        redirectUris: Schema.optional(Schema.Array(Schema.String)),
+        refreshTokenOptions: Schema.optional(Schema.Struct({
+            lifetime: Schema.optional(Schema.String),
+        })),
+        scopes: Schema.optional(Schema.Array(Schema.Union([
+            Schema.Literals(["openid", "groups", "email", "profile"]),
+            Schema.String,
+        ]))),
+    }).pipe(Schema.encodeKeys({
+        authType: "auth_type",
+        consumerServiceUrl: "consumer_service_url",
+        customAttributes: "custom_attributes",
+        defaultRelayState: "default_relay_state",
+        idpEntityId: "idp_entity_id",
+        nameIdFormat: "name_id_format",
+        nameIdTransformJsonata: "name_id_transform_jsonata",
+        publicKey: "public_key",
+        samlAttributeTransformJsonata: "saml_attribute_transform_jsonata",
+        spEntityId: "sp_entity_id",
+        ssoEndpoint: "sso_endpoint",
+        accessTokenLifetime: "access_token_lifetime",
+        allowPkceWithoutClientSecret: "allow_pkce_without_client_secret",
+        appLauncherUrl: "app_launcher_url",
+        clientId: "client_id",
+        clientSecret: "client_secret",
+        customClaims: "custom_claims",
+        grantTypes: "grant_types",
+        groupFilterRegex: "group_filter_regex",
+        hybridAndImplicitOptions: "hybrid_and_implicit_options",
+        redirectUris: "redirect_uris",
+        refreshTokenOptions: "refresh_token_options",
+        scopes: "scopes",
+    }))),
+    appLauncherLogoUrl: Schema.optional(Schema.String),
+    bgColor: Schema.optional(Schema.String),
+    footerLinks: Schema.optional(Schema.Array(Schema.Struct({
+        name: Schema.String,
+        url: Schema.String,
+    }))),
+    headerBgColor: Schema.optional(Schema.String),
+    landingPageDesign: Schema.optional(Schema.Struct({
+        buttonColor: Schema.optional(Schema.String),
+        buttonTextColor: Schema.optional(Schema.String),
+        imageUrl: Schema.optional(Schema.String),
+        message: Schema.optional(Schema.String),
+        title: Schema.optional(Schema.String),
+    }).pipe(Schema.encodeKeys({
+        buttonColor: "button_color",
+        buttonTextColor: "button_text_color",
+        imageUrl: "image_url",
+        message: "message",
+        title: "title",
+    }))),
+    skipAppLauncherLoginPage: Schema.optional(Schema.Boolean),
+    targetCriteria: Schema.optional(Schema.Union([
+        Schema.Array(Schema.Struct({
+            port: Schema.Number,
+            protocol: Schema.Literal("SSH"),
+            targetAttributes: Schema.Record(Schema.String, Schema.Unknown),
+        }).pipe(Schema.encodeKeys({
+            port: "port",
+            protocol: "protocol",
+            targetAttributes: "target_attributes",
+        }))),
+        Schema.Array(Schema.Struct({
+            port: Schema.Number,
+            protocol: Schema.Literal("RDP"),
+            targetAttributes: Schema.Record(Schema.String, Schema.Unknown),
+        }).pipe(Schema.encodeKeys({
+            port: "port",
+            protocol: "protocol",
+            targetAttributes: "target_attributes",
+        }))),
+    ])),
 };
 export const UpdateAccessApplicationForAccountRequest = 
 /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
@@ -25751,6 +27197,14 @@ export const UpdateAccessApplicationForAccountRequest =
     skipInterstitial: "skip_interstitial",
     tags: "tags",
     useClientlessIsolationAppLauncherUrl: "use_clientless_isolation_app_launcher_url",
+    saasApp: "saas_app",
+    appLauncherLogoUrl: "app_launcher_logo_url",
+    bgColor: "bg_color",
+    footerLinks: "footer_links",
+    headerBgColor: "header_bg_color",
+    landingPageDesign: "landing_page_design",
+    skipAppLauncherLoginPage: "skip_app_launcher_login_page",
+    targetCriteria: "target_criteria",
 }), T.Http({
     method: "PUT",
     path: "/accounts/{account_id}/access/apps/{appId}",
@@ -25791,6 +27245,14 @@ export const UpdateAccessApplicationForZoneRequest =
     skipInterstitial: "skip_interstitial",
     tags: "tags",
     useClientlessIsolationAppLauncherUrl: "use_clientless_isolation_app_launcher_url",
+    saasApp: "saas_app",
+    appLauncherLogoUrl: "app_launcher_logo_url",
+    bgColor: "bg_color",
+    footerLinks: "footer_links",
+    headerBgColor: "header_bg_color",
+    landingPageDesign: "landing_page_design",
+    skipAppLauncherLoginPage: "skip_app_launcher_login_page",
+    targetCriteria: "target_criteria",
 }), T.Http({ method: "PUT", path: "/zones/{zone_id}/access/apps/{appId}" }));
 export const UpdateAccessApplicationResponse = 
 /*@__PURE__*/ /*#__PURE__*/ Schema.Union([
@@ -57063,12 +58525,15 @@ export const createDlpEntry = /*@__PURE__*/ /*#__PURE__*/ API.make(() => ({
 export const UpdateDlpEntryRequest = /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
     entryId: Schema.String.pipe(T.HttpPath("entryId")),
     accountId: Schema.String.pipe(T.HttpPath("account_id")),
-    name: Schema.String,
-    pattern: Schema.Struct({
+    name: Schema.optional(Schema.String),
+    pattern: Schema.optional(Schema.Struct({
         regex: Schema.String,
         validation: Schema.optional(Schema.Literal("luhn")),
-    }),
-    type: Schema.Literal("custom"),
+    })),
+    type: Schema.Union([
+        Schema.Literals(["custom", "predefined", "integration"]),
+        Schema.String,
+    ]),
     description: Schema.optional(Schema.Union([Schema.String, Schema.Null])),
     enabled: Schema.optional(Schema.Boolean),
 }).pipe(T.Http({
@@ -67980,7 +69445,7 @@ export const CreateGatewayProxyEndpointRequest =
 /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
     accountId: Schema.String.pipe(T.HttpPath("account_id")),
     name: Schema.String,
-    kind: Schema.optional(Schema.Literal("ip")),
+    kind: Schema.optional(Schema.Union([Schema.Literals(["ip", "identity"]), Schema.String])),
 }).pipe(T.Http({
     method: "POST",
     path: "/accounts/{account_id}/gateway/proxy_endpoints",
@@ -72856,6 +74321,33 @@ const CreateIdentityProviderBaseFields = {
             Schema.String,
         ])),
         supportGroups: Schema.optional(Schema.Boolean),
+        centrifyAccount: Schema.optional(Schema.String),
+        centrifyAppId: Schema.optional(Schema.String),
+        appsDomain: Schema.optional(Schema.String),
+        authUrl: Schema.optional(Schema.String),
+        certsUrl: Schema.optional(Schema.String),
+        pkceEnabled: Schema.optional(Schema.Boolean),
+        scopes: Schema.optional(Schema.Array(Schema.String)),
+        tokenUrl: Schema.optional(Schema.String),
+        authorizationServerId: Schema.optional(Schema.String),
+        oktaAccount: Schema.optional(Schema.String),
+        oneloginAccount: Schema.optional(Schema.String),
+        pingEnvId: Schema.optional(Schema.String),
+        attributes: Schema.optional(Schema.Array(Schema.String)),
+        emailAttributeName: Schema.optional(Schema.String),
+        enableEncryption: Schema.optional(Schema.Boolean),
+        headerAttributes: Schema.optional(Schema.Array(Schema.Struct({
+            attributeName: Schema.optional(Schema.String),
+            headerName: Schema.optional(Schema.String),
+        }).pipe(Schema.encodeKeys({
+            attributeName: "attribute_name",
+            headerName: "header_name",
+        })))),
+        idpPublicCerts: Schema.optional(Schema.Array(Schema.String)),
+        issuerUrl: Schema.optional(Schema.String),
+        signRequest: Schema.optional(Schema.Boolean),
+        ssoTargetUrl: Schema.optional(Schema.String),
+        restrictToAccountMembers: Schema.optional(Schema.Boolean),
     }).pipe(Schema.encodeKeys({
         claims: "claims",
         clientId: "client_id",
@@ -72865,6 +74357,27 @@ const CreateIdentityProviderBaseFields = {
         emailClaimName: "email_claim_name",
         prompt: "prompt",
         supportGroups: "support_groups",
+        centrifyAccount: "centrify_account",
+        centrifyAppId: "centrify_app_id",
+        appsDomain: "apps_domain",
+        authUrl: "auth_url",
+        certsUrl: "certs_url",
+        pkceEnabled: "pkce_enabled",
+        scopes: "scopes",
+        tokenUrl: "token_url",
+        authorizationServerId: "authorization_server_id",
+        oktaAccount: "okta_account",
+        oneloginAccount: "onelogin_account",
+        pingEnvId: "ping_env_id",
+        attributes: "attributes",
+        emailAttributeName: "email_attribute_name",
+        enableEncryption: "enable_encryption",
+        headerAttributes: "header_attributes",
+        idpPublicCerts: "idp_public_certs",
+        issuerUrl: "issuer_url",
+        signRequest: "sign_request",
+        ssoTargetUrl: "sso_target_url",
+        restrictToAccountMembers: "restrict_to_account_members",
     })),
     name: Schema.String,
     type: Schema.Union([
@@ -74161,6 +75674,33 @@ const UpdateIdentityProviderBaseFields = {
             Schema.String,
         ])),
         supportGroups: Schema.optional(Schema.Boolean),
+        centrifyAccount: Schema.optional(Schema.String),
+        centrifyAppId: Schema.optional(Schema.String),
+        appsDomain: Schema.optional(Schema.String),
+        authUrl: Schema.optional(Schema.String),
+        certsUrl: Schema.optional(Schema.String),
+        pkceEnabled: Schema.optional(Schema.Boolean),
+        scopes: Schema.optional(Schema.Array(Schema.String)),
+        tokenUrl: Schema.optional(Schema.String),
+        authorizationServerId: Schema.optional(Schema.String),
+        oktaAccount: Schema.optional(Schema.String),
+        oneloginAccount: Schema.optional(Schema.String),
+        pingEnvId: Schema.optional(Schema.String),
+        attributes: Schema.optional(Schema.Array(Schema.String)),
+        emailAttributeName: Schema.optional(Schema.String),
+        enableEncryption: Schema.optional(Schema.Boolean),
+        headerAttributes: Schema.optional(Schema.Array(Schema.Struct({
+            attributeName: Schema.optional(Schema.String),
+            headerName: Schema.optional(Schema.String),
+        }).pipe(Schema.encodeKeys({
+            attributeName: "attribute_name",
+            headerName: "header_name",
+        })))),
+        idpPublicCerts: Schema.optional(Schema.Array(Schema.String)),
+        issuerUrl: Schema.optional(Schema.String),
+        signRequest: Schema.optional(Schema.Boolean),
+        ssoTargetUrl: Schema.optional(Schema.String),
+        restrictToAccountMembers: Schema.optional(Schema.Boolean),
     }).pipe(Schema.encodeKeys({
         claims: "claims",
         clientId: "client_id",
@@ -74170,6 +75710,27 @@ const UpdateIdentityProviderBaseFields = {
         emailClaimName: "email_claim_name",
         prompt: "prompt",
         supportGroups: "support_groups",
+        centrifyAccount: "centrify_account",
+        centrifyAppId: "centrify_app_id",
+        appsDomain: "apps_domain",
+        authUrl: "auth_url",
+        certsUrl: "certs_url",
+        pkceEnabled: "pkce_enabled",
+        scopes: "scopes",
+        tokenUrl: "token_url",
+        authorizationServerId: "authorization_server_id",
+        oktaAccount: "okta_account",
+        oneloginAccount: "onelogin_account",
+        pingEnvId: "ping_env_id",
+        attributes: "attributes",
+        emailAttributeName: "email_attribute_name",
+        enableEncryption: "enable_encryption",
+        headerAttributes: "header_attributes",
+        idpPublicCerts: "idp_public_certs",
+        issuerUrl: "issuer_url",
+        signRequest: "sign_request",
+        ssoTargetUrl: "sso_target_url",
+        restrictToAccountMembers: "restrict_to_account_members",
     })),
     name: Schema.String,
     type: Schema.Union([